NetSight
IP …
critical9.8

CVE-2002-0391

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remo…

Impact

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Affected products

VendorProductAffected versions
FreebsdFreebsd
through 4.6.1
OpenbsdOpenbsd
Version 3.1
SunSolaris
Versions 2.6, 9.0
SunSunos
Versions 5.5.1, 5.7, 5.8
MicrosoftWindows 2000
All versions
MicrosoftWindows Nt
Version 4.0
MicrosoftWindows Xp
All versions

Weakness classification

CWE-190

References